Privacy Policy

Miriel is made by Poseidon R&D Inc ("we", "us"). This policy explains what information the Miriel app and our website (mirielai.com) collect, where it goes, how long we keep it, and what you can do about it. Miriel is for parents and caregivers. Children do not use the app; parents enter information about their children.

The short version

• Your child's profile, logs and photos are stored on your phone. We do not keep a copy of them on our servers.
• When you use an AI feature, the details needed for the answer are sent through our server to Google's Gemini AI. Your child's name is replaced with "Child" first. We ask for your consent, and verify it by email, before any of your child's information is sent.
• We record how the app is used (which screens and features), tied to a random device code. These records include your child's age range, such as "6 to 11 months", but never names, allergies or health details.
• We do not sell your information, show ads, or use advertising trackers.
• You can delete everything from the app at any time (Account > Security & Privacy > Privacy & Consent > Delete All Data).

1. What we collect

1.1 What you enter about your child (stored on your phone)

• Profile: name, birth date, sex, allergies, medical conditions, diet, activity level, nutrition goals, and feeding and sensory preferences (for example texture or temperature aversions, foods your child accepts or refuses, and feeding difficulties you record, such as ARFID, sensory processing or oral-motor difficulties).
• Growth: height, weight and the growth percentiles the app calculates.
• Food and drink: meals eaten and planned, water, pantry items and your shopping list.
• Starting Solids: foods and allergens introduced, reactions and symptoms, your notes and reaction photos, your answers to the allergy risk questions (severe eczema, existing food allergy), and weeks of pregnancy if your baby was born early.
• Photos you take in the app: meals, food labels, receipts and your fridge or ingredients.
• Your conversations with Miriel and your scan history.

1.2 About you

• Your name, which you type when you give consent.
• Your email address, when you verify it to use AI features, or if you choose to receive product emails. It is also attached to a Founding Family membership (section 8).
• If you use Sign in with Apple: the Apple user ID, name and email Apple provides. These stay on your phone.
• Your profile photo, if you add one (on your phone).
• Feedback you send us, including your email if you add it, and the IP address it was sent from.

1.3 From your device

• A random device code the app creates. It is kept in your phone's secure storage (the iOS Keychain), so it stays the same if you delete and reinstall the app. It links your usage records, your email, your notification token, referral records and purchase records on our server.
• A second random code sent with AI and voice requests, used to apply daily limits and prevent abuse.
• Device model, iOS version, app version, language and region setting.
• Your IP address, which our server and our providers see whenever the app contacts them. We use it to prevent abuse.
• Your notification token, if you allow notifications (section 3.4).

1.4 How you use the app

We record which screens and features are used (for example "opened the meal plan"), with the time, your device code and the device details above. When you save a child's profile, after you give consent, we also record your child's age range (0 to 5 months, 6 to 11 months, 12 to 35 months, 3 to 5 years, or 6 years and older). These records contain no names, allergies, medical conditions or other health details about your child. They can show how many children you added and which features you use; using Starting Solids, for example, shows that your child is a baby.

The app does not use your location.

2. Where your child's information is kept

• Your child's profile, logs and photos are stored only on your phone, protected by iOS. Miriel does not sync them to iCloud or to our servers.
• Your phone's own iCloud or computer backup may include Miriel's data. You control those backups.
• If you get a new phone, your data moves only if you restore a backup of your old phone.
• Deleting the app removes most of its data, but iOS keeps a few items in secure storage (the Keychain) after the app is deleted: your email, your name, your consent record, the device codes, Sign in with Apple details and your App Lock passcode (hashed). To remove everything, use Delete All Data before deleting the app.
• When you use AI features, information passes through our server on its way to Google (section 3.1). Our server does not store it, except that a text answer may be kept for up to 1 hour so an identical question gets a faster reply. Photos are never kept.

3. When information leaves your phone

3.1 Google Gemini (AI answers)

Used for: chat with Miriel, meal plans, label and food scanning, meal photo logging, receipt and fridge scanning, pantry recipes, and translating app text.

Sent, only for the feature you are using:

• your child's age group (for example "toddler (1 to 3 years)"), and for babies under 12 months, their feeding stage (for example 6 to 8 months);
• sex, allergies, medical conditions, diet, activity level, nutrition goals, and feeding and sensory preferences, including feeding difficulties you record;
• growth information (percentile ranges and alerts such as low weight gain);
• meals eaten and planned, pantry items and portion targets;
• what you type in chat and in meal descriptions;
• photos you choose to analyze (meals, food labels, receipts, fridge or ingredients).

Not sent: your child's name (we replace the name saved in the profile with "Child"), birth date, your email, your device code or your IP address. Nicknames or other names you type yourself are not replaced, so please leave them out.

How: requests go from your phone through our server to Google. We use Google's paid Gemini API, under which Google does not use the content to train its models. Google may keep requests for a limited time to detect abuse. None of your child's information is sent until you have given consent and verified your email (section 4). Translation sends only the app's own text, such as articles and this policy, and starts once you give consent.

3.2 ElevenLabs (read-aloud voice)

• On Standard and Advanced plans, when you use voice mode or the Daily Recap, the text of Miriel's answer, or the recap text (which calls your child "your little one"), is sent to ElevenLabs to be read aloud.
• On all plans, when you tap the speaker icon next to a food, the food name is sent to hear how it is pronounced.
• Only text is sent. Your voice is never sent to ElevenLabs.

3.3 Apple

• Speech recognition: when you talk to Miriel, Apple's speech recognition turns your voice into text. It runs on your phone when your phone supports it for your language; otherwise the audio is processed by Apple.
• Notifications, payments and sign-in: Apple delivers notifications, processes all payments and provides Sign in with Apple.
• App check: Apple helps confirm that requests to our server come from the genuine Miriel app.

3.4 Our service providers

These companies run parts of Miriel for us and may only use the information to do that:

Notifications: if you allow notifications, we store your notification token with your device code, language, iOS and app version, and whether you agreed to marketing notifications (off unless you turn it on).

Store buttons: if you tap a store button on your shopping list, the unchecked items are sent to that store's website as a search.

Where information is processed: our server and database are in South Korea. Google, ElevenLabs, Resend and PostHog may process information in the United States or other countries.

We do not sell your information. The app has no advertising and no third-party tracking.

4. Children's privacy (COPPA)

• Miriel is for parents. Children do not use the app.
• Giving consent: when you add your child, you give consent by typing your name and agreeing on the consent screen.
• Verifying consent: before any of your child's information is sent to our AI provider, we send a one-time code to your email to verify your consent. If you already verified your email in an earlier version of the app, that verification still counts.
• Before you give consent, the app sends only usage records (screen and feature names with your device code). They contain nothing about your child. In the European Economic Area and the United Kingdom, usage records are sent only if you agree.
• Your rights as a parent: you can review and correct your child's information in the app, delete it (section 6), withdraw your consent at any time, and refuse further collection.
• Withdrawing consent (Account > Security & Privacy > Privacy & Consent > Withdraw Consent) stops all AI features. You must give consent again before you can keep using the app. It does not delete your data; use Delete All Data for that.
• Changes: if we change what we collect or share in a way that matters, the app asks for your consent again.

5. How we use information

• To run the app's features: meal plans, AI answers, scanning, tracking and reports.
• To verify your consent.
• To send reminders and notifications you allow.
• To send product emails, only if you opt in.
• To understand how the app is used and fix problems.
• To handle purchases, referral rewards and Founding Family memberships.
• To prevent abuse, using device codes and IP addresses.
• To answer your feedback and questions.

6. Your choices

• Usage records: turn them off at Account > Security & Privacy > Privacy & Consent > Share Usage Statistics. They are on by default, except in the European Economic Area and the United Kingdom, where they are off until you agree.
• Notifications: turn them off in iOS Settings. Marketing notifications are off unless you turn them on in the app's notification settings.
• Product emails: off unless you opt in. Every product email has an unsubscribe link. Verification codes are always sent.
• Review and correct: everything you entered can be viewed and edited in the app.
• Export: Account > Security & Privacy > Data Management > Export All Data creates an encrypted copy of your main records, protected by a code you choose. It does not yet include logged meals or photos, and the app cannot import it yet.
• Delete All Data (Account > Security & Privacy > Privacy & Consent > Delete All Data) removes everything Miriel stores on your phone, and asks our server to delete the records linked to your device code: usage records, your email, your notification token and referral records. We keep what we must for billing and legal reasons (section 8), feedback messages with your email removed, copies of messages in our support inbox, and our encrypted backups for up to 90 days. If our server cannot be reached, the app tries again later.
• Withdraw consent: see section 4.
• For anything else, including deleting information we hold about you, email mirielsp@mirielai.com.

7. How long we keep information

• On your phone: until you delete it. Conversations with Miriel and scan history are deleted automatically after 180 days, and each conversation keeps its last 1,000 messages.
• On our server: usage records are deleted after 14 months. Your email, notification token and referral records are deleted after 24 months with no activity from your device. Delete All Data removes them sooner.
• Feedback: deleted after 24 months, or sooner if you ask. Your email and IP address are removed from it when you delete your data.
• Campaign-link records (website): deleted after 90 days.
• Answer cache and counters: up to 1 hour and up to 24 hours.
• Backups: encrypted, kept for 90 days.
• Purchase records: as long as we need them for billing, tax and legal reasons.

8. Subscriptions, Founding Family and referrals

• Miriel has a free plan, Standard and Advanced subscriptions (monthly or yearly), and Founding Family, a one-time purchase.
• There are no free trials or introductory offers at the moment. Apple offer codes and referral rewards can add free time.
• Apple processes all payments. We never receive your card details.
• From Apple, we receive and store: the transaction ID, product, price, currency, the country of your App Store account, purchase, renewal and expiry dates, and your device code linked to the purchase.
• Founding Family: we store the transaction ID, your device code and your verified email. When you delete your data, your email and device code are removed from it; the membership record itself is kept.
• Paid plans add features that send more information to our providers: read-aloud voice (section 3.2).
• Referrals: if you take part, we store your referral code and which purchases it led to (with Apple transaction IDs), linked to device codes. We do not collect information about children, do not access your contacts, and do not message the people you invite. Being referred does not add anyone to a marketing list. Referral records are deleted when you delete your data.
• Subscriptions renew automatically unless you cancel at least 24 hours before the period ends. You can manage or cancel them in iOS Settings > your Apple Account > Subscriptions.

9. Our website (mirielai.com)

• Our own statistics: the pages you visit, your language, the site that sent you and campaign tags, a random code for your browser tab, time on page, how far you scroll, which links and buttons you click, and what you type into the site search (the first 60 characters, leaving out anything that looks like an email or phone number).
• PostHog (United States): page views, clicks, page performance, errors and session recordings (what you type into forms is hidden), and your IP address.
• Forms: the contact form (name, email, message, which is also emailed to our support inbox), the investor form (name, email, company, message) and the Android waitlist (email, invite code and place in line; your IP address is used to prevent abuse).
• Google: your browser loads fonts and one image from Google, which sees your IP address.
• App Store links carry a tag that tells Apple which page you came from.
• Campaign links and QR codes: when you open one of our campaign links, we record which link it was, the time, your IP address, your browser and your approximate location (city and coordinates, estimated from your IP address by our host).
• The website does not use cookies. It uses your browser's session storage for the codes above and remembers your language on some pages.

10. Security

• On your phone, Miriel's data is protected by iOS. You can add an App Lock with Face ID or Touch ID. Your App Lock passcode is stored only as a salted hash.
• Information sent to us and our providers travels encrypted (HTTPS). Our database backups are encrypted.
• No system is perfectly secure. If we learn of a breach that affects your information, we will tell you.

11. Changes to this policy

We post any change here and in the app, with a new date. If a change affects what we collect about your child or who receives it, the app asks for your consent again.

12. Contact us

Poseidon R&D Inc
Email: mirielsp@mirielai.com
Website: mirielai.com